regecks

12 ms·

91.
by regecks 7y ago
Being a Bitbucket user is pretty distressing right now. We're invested quite heavily into it, but moving to Gitlab would really address some of our major pain points (having to run Sonatype Nexus, and some Bitbucket Pipelines restricti
92.
by regecks 7y ago
Yeah, good point. It makes me doubt that they will issue bucket-specific certificates at all. Perpetually exposing every single bucket name seems like a bad trade-off just to satisfy certificate verification. Maybe there will be a name tran
93.
by regecks 7y ago
They're already a CA, could they reasonably just issue a certificate for every bucket? I have no idea how many buckets there are in total. ~They probably couldn't take the Cloudflare approach of jamming 100 customer domains onto e
94.
by regecks 7y ago
I think you need FDE no matter what. e.g. Hibernation will dump your passwords to disk, even if they're only kept in in unmanaged, VirtualProtect'ed memory.
95.
by regecks 7y ago
Just to be sure, if your business is domiciled outside of the EU (e.g. Australia), there is nothing to be done regarding SCA, right? In other words, there's no risk with sticking to Stripe Checkout Legacy, even for European cards? I ha
96.
by regecks 7y ago
Really happy to read that OS packages will be available. Thanks for responding to feedback! All of these changes look great.
97.
by regecks 7y ago
It's interesting that even libsodium's box/secretbox have nonce as a separate part of its 'easy to use' interface. I also would like to know why it isn't just an opaque part of the ciphertext. I'm aware th
98.
by regecks 8y ago
You can also CNAME your _acme-challenge record to another zone and perform the updates on the target zone, avoiding overprivileging your webserver. https://github.com/joohoi/acme-dns is a server implementation of that,
99.
by regecks 8y ago
On Android, the root was first added in Nougat (~half of devices according to Android Distribution Dashboard). But I think that browsers (like Firefox and Chrome) on Android tend to bring their own cacerts rather than using the device'
100.
Transitioning to ISRG's Root(letsencrypt.org)
3 points by regecks 8y ago|0 comments
101.
by regecks 8y ago
Well, I watch Twitch using a personal fork of https://github.com/SebastianRask/Pocket-Plays-for-Twitch (which isn't really actively maintained), so when Twitch ads became in-stream this year, I replaced the defaul
102.
by regecks 8y ago
I think that you can just look for specific markers in the stream to detect ads. e.g. I look for SCTE-35 ( https://en.wikipedia.org/wiki/SCTE-35 ) in Twitch streams to filter out their ads. It takes no CPU at all to do.
103.
by regecks 8y ago
This was super easy to setup in Ubuntu, thanks!
104.
by regecks 8y ago
I've noticed the opposite. More people are starting to realize that FastCGI is one of the keys to good and consistent performance (as much as PHP will allow, anyway) and are recognizing that mod_php for the disaster that it is. So now
105.
by regecks 8y ago
Well, most shared hosting providers are also running cPanel on CentOS 7 and are getting their httpd packages from EasyApache 3/4, not from the CentOS base repo. cPanel definitely responded to this CVE: https://github.com&#x2
106.
by regecks 8y ago
How? 4chan use Cloudflare. They don't have a dedicated IP, do they? I would be surprised if Optus actually managed to do SNI filtering for the entire country without screwing it up. Edit: Huh, seems like they do have a dedicated IP. At
107.
by regecks 8y ago
Construct a phishing site that gives some vague error message about being unable to connect to your device, and offer the TOTP fallback. How many people will fall for it? "Literally cannot get phished" is woefully far away, becaus
108.
by regecks 8y ago
I misremembered - they are adding it: https://www.namecheap.com/blog/true-totp-2fa-and-u2f-are-com...
109.
by regecks 8y ago
I think devy means that you usually cannot add a U2F as the only second factor - you usually need to first add TOTP or phone number as backup. So, an attacker can just target the weaker factor and ignore U2F. I certainly had the same though
110.
by regecks 8y ago
Namecheap support U2F as well.
111.
by regecks 8y ago
> The fact that the January 2019 security update, 8u201, is the last version of Java 8 commercial entities can use for free, has pushed this a bit, it seems. Isn't OpenJDK providing updates for Java 8 through to September 2023? 8u20
112.
by regecks 8y ago
The easy solution is for the link to lead to an interstitial that shows "do you want to view the content? It will be the only time you can do so.", and make the underlying HTTP resource unpredictable (e.g. different ID to the link
113.
by regecks 8y ago
>It's still living in the world of one process or one thread per connection Not exactly - you choose the event MPM (mod_http2 won't even run with prefork MPM).
114.
by regecks 8y ago
I had the same impression, but mholt pointed out to me that building from source or using the Github binary releases are valid alternatives to paying for licensing.
115.
by regecks 8y ago
S3 also makes this kind of protection pretty easy - enable bucket versioning and allow only PutObject.
116.
by regecks 8y ago
I try enabling this occasionally, but it causes my zoom preference to be forgotten for each site after I close the tab. Seems to be intentional ( https://bugzilla.mozilla.org/show_bug.cgi?id=1369357 ). I need zoom to not ruin
117.
by regecks 8y ago
Apple do this and call it "remanufacturing".
118.
by regecks 8y ago
I gave it a shot and it appears to work as expected. sqlite> create table a (id int primary key, j json); sqlite> insert into a values (1, '{"hello":"world"}'); sqlite> create index idx_a on a
119.
by regecks 8y ago
FWIW, Certbot does, by default, replace the private key on renewal.
120.
by regecks 8y ago
I suppose you could do it if you placed them in a directory, and renamed that. But I don't think that's what Certbot does, I think it works by changing file symlinks individually.

More ›